| 2026-08-05 16:13 UTC |
tipc: fix NULL deref in tipc_named_node_up() on empty publication list |
11 |
tung.quang.nguyen@est.tech |
finished
in 4h7m0s
|
| 2026-08-04 02:16 UTC |
tipc: fix NULL deref in tipc_named_node_up() on empty publication list |
10 |
tung.quang.nguyen@est.tech |
finished
in 16m0s
|
| 2026-08-02 13:01 UTC |
macvlan: require lower-netns admin for shared port settings |
2 |
doruk@0sec.ai |
finished
in 4h46m0s
|
| 2026-08-01 12:10 UTC |
netfilter: ipset: serialize kernel-side put-byindex with swap |
1 |
zhilinz@nebusec.ai |
finished
in 4h17m0s
|
| 2026-07-30 08:34 UTC |
tipc: fix NULL deref in tipc_named_node_up() on empty publication list |
9 |
tung.quang.nguyen@est.tech |
finished
in 4h50m0s
|
| 2026-07-29 20:06 UTC |
macvlan: require init-userns CAP_NET_ADMIN to raise bc_queue_len |
2 |
xmei5@asu.edu |
finished
in 4h17m0s
|
| 2026-07-29 19:16 UTC |
vsock/virtio: fix worker access after virtqueue teardown |
3 |
bestswngs@gmail.com |
finished
in 3h56m0s
|
| 2026-07-28 21:54 UTC |
seg6: check lwtunnel state after nf hooks in seg6local |
2 |
xmei5@asu.edu |
finished
in 4h35m0s
|
| 2026-07-27 03:58 UTC |
vsock/virtio: prevent workers from using deleted virtqueues |
1 |
bestswngs@gmail.com |
finished
in 5h17m0s
|
| 2026-07-26 12:54 UTC |
macvlan: require lower-netns admin for shared port settings |
1 |
doruk@0sec.ai |
finished
in 5h50m0s
|
| 2026-07-26 12:03 UTC |
net: flow_offload: serialize driver callback lists |
2 |
bestswngs@gmail.com |
finished
in 5h21m0s
|
| 2026-07-25 23:39 UTC |
bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor |
2 |
xmei5@asu.edu |
finished
in 6h40m0s
|
| 2026-07-23 17:44 UTC |
nfc: digital: fix use-after-free in nfc_digital_unregister_device() |
2 |
bestswngs@gmail.com |
skipped
|
| 2026-07-22 22:38 UTC |
netfilter: ipset: fix refcount race between list:set GC and swap |
1 |
xmei5@asu.edu |
finished
in 5h45m0s
|
| 2026-07-22 21:02 UTC |
rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() |
4 |
xmei5@asu.edu |
finished
in 5h19m0s
|
| 2026-07-22 00:29 UTC |
nexthop: take nh->lock for f6i_list walks in replace check and notify |
1 |
xmei5@asu.edu |
finished
in 6h1m0s
|
| 2026-07-21 23:28 UTC |
amt: linearize skb in amt_rcv() to fix use-after-free of cached headers |
1 |
xmei5@asu.edu |
finished
in 5h20m0s
|
| 2026-07-21 16:36 UTC |
nfc: digital: fix use-after-free in nfc_digital_unregister_device() |
1 |
bestswngs@gmail.com |
finished
in 1h56m0s
|
| 2026-07-20 22:34 UTC |
bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor |
1 |
xmei5@asu.edu |
finished
in 6h4m0s
|
| 2026-07-20 20:44 UTC |
seg6: fix NULL deref in input_action_end_dx{4,6}_finish() after nf hook |
1 |
xmei5@asu.edu |
finished
in 5h39m0s
|
| 2026-07-19 23:21 UTC |
bonding: fix skb_under_panic in bond_ns_send() over stacked VLANs |
1 |
xmei5@asu.edu |
finished
in 5h23m0s
|
| 2026-07-19 22:15 UTC |
netfilter: nft_payload: fix mask build for partial field offload |
1 |
xmei5@asu.edu |
finished
in 5h1m0s
|
| 2026-07-19 17:50 UTC |
netdevsim: tc: serialize access to nsim_block_cb_list |
1 |
bestswngs@gmail.com |
finished
in 4h55m0s
|
| 2026-07-18 09:25 UTC |
tipc: fix NULL deref in tipc_named_node_up() on empty publication list |
8 |
bestswngs@gmail.com |
finished
in 4h19m0s
|
| 2026-07-18 09:09 UTC |
tipc: fix NULL deref in tipc_named_node_up() on empty publication list |
7 |
bestswngs@gmail.com |
finished
in 4h27m0s
|
| 2026-07-17 18:56 UTC |
tipc: fix NULL deref in tipc_named_node_up() on empty publication list |
6 |
bestswngs@gmail.com |
finished
in 4h48m0s
|
| 2026-07-17 18:30 UTC |
tipc: fix NULL deref in tipc_named_node_up() on empty publication list |
5 |
bestswngs@gmail.com |
skipped
|
| 2026-07-16 19:02 UTC |
tipc: fix NULL deref in tipc_named_node_up() on empty publication list |
4 |
bestswngs@gmail.com |
finished
in 5h18m0s
|
| 2026-07-16 02:52 UTC |
tipc: serialize udp bearer replicast list updates |
6 |
bestswngs@gmail.com |
finished
in 5h11m0s
|
| 2026-07-14 21:22 UTC |
rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() |
3 |
xmei5@asu.edu |
skipped
|
| 2026-07-14 19:21 UTC |
tipc: serialize udp bearer replicast list updates |
5 |
bestswngs@gmail.com |
finished
in 5h6m0s
|
| 2026-07-14 17:41 UTC |
tipc: fix NULL deref in tipc_named_node_up() on empty publication list |
3 |
bestswngs@gmail.com |
finished
in 4h50m0s
|
| 2026-07-13 23:32 UTC |
bpf: tcp: fix double sock release on batch realloc |
1 |
xmei5@asu.edu |
finished
in 5h50m0s
|
| 2026-07-13 22:15 UTC |
nexthop: initialize extack in nh_res_bucket_migrate() |
1 |
xmei5@asu.edu |
finished
in 1h48m0s
|
| 2026-07-13 18:36 UTC |
netfilter: nft_fib: bail out if input device is missing |
1 |
xmei5@asu.edu |
finished
in 5h11m0s
|
| 2026-07-13 16:33 UTC |
netfilter: ipset: skip extension destroy on hash resize replay |
3 |
bestswngs@gmail.com |
finished
in 5h12m0s
|
| 2026-07-13 16:15 UTC |
netfilter: ipset: skip extension destroy on hash resize replay |
2 |
bestswngs@gmail.com |
finished
in 55m0s
|
| 2026-07-12 23:42 UTC |
netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() |
1 |
xmei5@asu.edu |
finished
in 3h29m0s
|
| 2026-07-12 23:41 UTC |
isofs: fix out-of-bounds page array access on empty zisofs block |
1 |
xmei5@asu.edu |
finished
in 3h7m0s
|
| 2026-07-12 22:09 UTC |
mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n |
1 |
xmei5@asu.edu |
finished
in 4h29m0s
|
| 2026-07-12 13:34 UTC |
fs/ntfs3: do not mark frame pages uptodate on read error |
1 |
bestswngs@gmail.com |
finished
in 5h28m0s
|
| 2026-07-11 21:03 UTC |
wifi: mac80211: tear down new links on vif update error path |
1 |
xmei5@asu.edu |
finished
in 4h51m0s
|
| 2026-07-11 11:50 UTC |
mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n |
1 |
bestswngs@gmail.com |
finished
in 4h49m0s
|
| 2026-07-11 00:59 UTC |
net: sock: prevent integer overflow in sock_reserve_memory() |
1 |
xmei5@asu.edu |
finished
in 6h45m0s
|
| 2026-07-10 23:07 UTC |
gtp: check skb_pull_data() return in gtp1u_send_echo_resp() |
1 |
xmei5@asu.edu |
finished
in 4h58m0s
|
| 2026-07-10 22:30 UTC |
rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() |
2 |
xmei5@asu.edu |
skipped
|
| 2026-07-10 19:19 UTC |
Enable BPF JIT hardening by default when x86_64 CFI is enabled |
1 |
jmill@asu.edu |
skipped
|
| 2026-07-10 17:55 UTC |
nfc: llcp: validate TLV length before parsing to fix OOB read |
1 |
bestswngs@gmail.com |
finished
in 5h39m0s
|
| 2026-07-10 17:47 UTC |
tipc: serialize udp bearer replicast list updates |
4 |
bestswngs@gmail.com |
finished
in 5h7m0s
|
| 2026-07-10 03:29 UTC |
tipc: serialize udp bearer replicast list updates |
3 |
bestswngs@gmail.com |
finished
in 5h30m0s
|
| 2026-07-10 01:41 UTC |
amt: refresh cached IP header pointers after MLD/IGMP checks |
1 |
xmei5@asu.edu |
finished
in 5h1m0s
|
| 2026-07-09 18:41 UTC |
ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() |
1 |
xmei5@asu.edu |
finished
in 6h2m0s
|
| 2026-07-09 14:47 UTC |
tipc: fix NULL deref in tipc_lxc_xmit() on node up |
3 |
bestswngs@gmail.com |
finished
in 4h42m0s
|
| 2026-07-09 07:44 UTC |
rds: tcp: hold the net_device across ipv6_chk_addr() in rds_tcp_laddr_check() |
1 |
xmei5@asu.edu |
finished
in 5h29m0s
|
| 2026-07-08 18:11 UTC |
netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() |
2 |
xmei5@asu.edu |
finished
in 2h42m0s
|
| 2026-07-08 17:30 UTC |
tipc: fix NULL deref in tipc_lxc_xmit() on node up |
1 |
bestswngs@gmail.com |
finished
in 5h4m0s
|
| 2026-07-08 16:13 UTC |
tipc: guard against empty buffer list in tipc_node_xmit() |
1 |
bestswngs@gmail.com |
finished
in 4h57m0s
|
| 2026-07-07 16:42 UTC |
tipc: serialize udp bearer replicast list updates |
2 |
bestswngs@gmail.com |
finished
in 4h57m0s
|
| 2026-07-06 23:33 UTC |
vxlan: add missing NULL check for vxlan_sock in GRO path |
1 |
xmei5@asu.edu |
finished
in 4h48m0s
|
| 2026-07-06 23:28 UTC |
netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() |
1 |
xmei5@asu.edu |
finished
in 2h51m0s
|
| 2026-07-06 21:25 UTC |
macvlan: cap IFLA_MACVLAN_BC_QUEUE_LEN to bound broadcast backlog |
1 |
xmei5@asu.edu |
finished
in 5h44m0s
|
| 2026-07-06 16:30 UTC |
tipc: fix NULL deref in tipc_named_node_up() on empty publication list |
2 |
bestswngs@gmail.com |
finished
in 5h22m0s
|
| 2026-07-06 13:47 UTC |
tipc: serialize udp bearer replicast list updates |
1 |
bestswngs@gmail.com |
finished
in 5h5m0s
|
| 2026-07-05 23:36 UTC |
netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag |
1 |
xmei5@asu.edu |
finished
in 4h55m0s
|
| 2026-07-05 21:58 UTC |
netfilter: ebtables: terminate table name before find_table_lock() |
1 |
xmei5@asu.edu |
finished
in 4h26m0s
|
| 2026-07-05 11:59 UTC |
tipc: fix NULL deref in tipc_named_node_up() on empty publication list |
1 |
bestswngs@gmail.com |
finished
in 4h35m0s
|
| 2026-07-05 01:40 UTC |
vfio/pci: clear vdev->msi_perm after freeing it on init failure |
1 |
xmei5@asu.edu |
finished
in 1h42m0s
|
| 2026-07-05 00:30 UTC |
sctp: validate the body of a STALE_COOKIE error before reading it |
1 |
xmei5@asu.edu |
finished
in 4h32m0s
|
| 2026-07-04 22:22 UTC |
vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes |
1 |
xmei5@asu.edu |
finished
in 4h5m0s
|
| 2026-07-04 21:03 UTC |
xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full |
1 |
xmei5@asu.edu |
finished
in 4h23m0s
|
| 2026-07-04 17:14 UTC |
ipv4: fib: free fib_alias with kfree_rcu() on insert error path |
1 |
bestswngs@gmail.com |
finished
in 4h35m0s
|
| 2026-07-04 06:22 UTC |
netfilter: ipset: skip extension destroy on hash resize replay |
1 |
bestswngs@gmail.com |
finished
in 4h51m0s
|
| 2026-07-04 03:35 UTC |
sctp: validate STALE_COOKIE cause length before reading staleness |
1 |
bestswngs@gmail.com |
finished
in 4h14m0s
|
| 2026-07-03 05:19 UTC |
xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert |
2 |
xmei5@asu.edu |
finished
in 4h25m0s
|
| 2026-07-02 22:45 UTC |
bpf: reject mini-sockets in bpf_sock_destroy() |
1 |
xmei5@asu.edu |
finished
in 4h49m0s
|
| 2026-07-02 18:58 UTC |
xfrm: policy: use hlist_del_init_rcu in xfrm_hash_rebuild to avoid bydst poison |
1 |
xmei5@asu.edu |
finished
in 4h38m0s
|
| 2026-07-02 01:05 UTC |
xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() |
1 |
xmei5@asu.edu |
finished
in 1h23m0s
|
| 2026-06-30 18:32 UTC |
net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket |
2 |
xmei5@asu.edu |
finished
in 2h36m0s
|
| 2026-06-30 17:41 UTC |
net: qualcomm: rmnet: validate MAP frame length before ingress parsing |
2 |
xmei5@asu.edu |
finished
in 2h13m0s
|
| 2026-06-30 04:51 UTC |
net: usb: net1080: validate packet_len before pad-byte access in rx_fixup |
2 |
xmei5@asu.edu |
finished
in 2h44m0s
|
| 2026-06-29 21:47 UTC |
mm/vmalloc: widen guard region to defeat ENTER-based stack pivot |
2 |
xmei5@asu.edu |
skipped
|
| 2026-06-28 07:52 UTC |
net: qualcomm: rmnet: validate MAP frame length before ingress parsing |
1 |
xmei5@asu.edu |
finished
in 1h19m0s
|
| 2026-06-28 00:05 UTC |
wifi: p54: validate RX frame length in p54_rx_eeprom_readback() |
1 |
xmei5@asu.edu |
finished
in 1h33m0s
|
| 2026-06-27 21:28 UTC |
net: usb: net1080: validate packet_len before pad-byte access in rx_fixup |
1 |
xmei5@asu.edu |
finished
in 2h15m0s
|
| 2026-06-27 20:53 UTC |
usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() |
1 |
xmei5@asu.edu |
finished
in 2h17m0s
|
| 2026-06-27 02:40 UTC |
xfrm: fix sk_dst_cache double-free in xfrm_user_policy() |
1 |
xmei5@asu.edu |
finished
in 4h3m0s
|
| 2026-06-27 01:49 UTC |
net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket |
1 |
xmei5@asu.edu |
finished
in 2h7m0s
|
| 2026-06-26 17:34 UTC |
mm/vmalloc: widen guard region to defeat ENTER-based stack pivot |
1 |
xmei5@asu.edu |
finished
in 15m0s
|
| 2026-06-25 16:47 UTC |
netfilter: nf_log: validate MAC header was set before dumping it |
2 |
alexevgmart@gmail.com |
skipped
|
| 2026-06-25 01:00 UTC |
netfilter: ipset: fix race between dump and ip_set_list resize |
1 |
xmei5@asu.edu |
finished
in 4h33m0s
|
| 2026-06-21 09:35 UTC |
wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure |
1 |
xmei5@asu.edu |
finished
in 4h1m0s
|
| 2026-06-20 20:15 UTC |
net, bpf: check master for NULL in xdp_master_redirect() |
1 |
xmei5@asu.edu |
finished
in 4h14m0s
|
| 2026-06-19 04:53 UTC |
ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). |
1 |
xmei5@asu.edu |
finished
in 4h18m0s
|
| 2026-06-18 03:26 UTC |
geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint |
3 |
xmei5@asu.edu |
finished
in 4h23m0s
|
| 2026-06-17 13:57 UTC |
tipc: fix use-after-free of the discoverer in tipc_disc_rcv() |
3 |
bestswngs@gmail.com |
finished
in 4h46m0s
|
| 2026-06-17 06:55 UTC |
ipv6: ndisc: fix NULL deref in accept_untracked_na() |
1 |
bestswngs@gmail.com |
finished
in 4h21m0s
|
| 2026-06-16 12:22 UTC |
tipc: fix use-after-free of the discoverer in tipc_disc_rcv() |
2 |
bestswngs@gmail.com |
finished
in 5h15m0s
|
| 2026-06-16 04:28 UTC |
virtio-net: fix len check in receive_big() |
4 |
xmei5@asu.edu |
finished
in 1h52m0s
|
| 2026-06-15 19:05 UTC |
ext4: fix out-of-bounds read in ext4_read_inline_dir() |
4 |
xmei5@asu.edu |
finished
in 5h6m0s
|
| 2026-06-14 03:49 UTC |
psample: use nla_reserve() for PSAMPLE_ATTR_DATA |
2 |
xmei5@asu.edu |
finished
in 4h54m0s
|